Reproducible evidenceEvery published result links to inspectable source evidence and methodology.
Public-interest software inspection versioned methodology
A public record of software health.
Bridges, elevators, and food have condition records kept in public. The software underneath all three does not. This is that record: maintainability, engineering quality, security posture, ecosystem adoption, and governance, measured the same way for every repository.
01Evidence attached02Results independent of payment03Method versioned
Independent resultsPayment, sponsorship, and vendor alignment cannot alter a published result.
Signals, not warrantiesResults inform review and procurement; they do not replace expert judgement.
Live catalogue
The record, as it stands.
Every repository admitted so far, searchable and rankable, each entry opening on a full report with its evidence.
Indexed repositories
83,018
Repositories admitted to the public record — inspected, or queued for a first inspection. Unaffected by the catalogue filters below.
Monthly downloads under inspection
636B
Combined monthly package downloads across every indexed repository, as reported by package registries — the dependency footprint the public record covers.
Median health index
59 Moderate
The midpoint health index across all inspected repositories, computed under metrics 2.10.0 — a reference point for reading any individual result.
npm
woodser/monero-ts
TypeScript library for using Monero
MITSep 19, 2026 · metrics 2.10.0
NuGet · npm
ErikEJ/SqlServer.Rules
140+ T-SQL static code analysis rules for SQL Database Projects and ad-hoc scripts
MITSep 17, 2026 · metrics 2.10.0
Packagist
bilfeldt/laravel-route-statistics
Log requests and group together for aggregated statistics of route usage
MITSep 19, 2026 · metrics 2.10.0
Hex
erlef/oidcc
OpenId Connect client library in Erlang & Elixir
Apache-2.0Sep 19, 2026 · metrics 2.10.0
npm
forcedotcom/code-analyzer
No repository description published.
BSD-3-ClauseSep 19, 2026 · metrics 2.10.0
npm
ota-meshi/eslint-plugin-jsonc
ESLint plugin for JSON(C|5)? files
MITSep 21, 2026 · metrics 2.10.0
Go
Macmod/ldapx
A flexible proxy for inspecting & transforming LDAP packets generated by any tool on the fly.
MITSep 19, 2026 · metrics 2.10.0
—
Senryoku/Deecy
Dreamcast emulator written in Zig
MITSep 17, 2026 · metrics 2.10.0
npm · Go
TencentCloud/tencentmeeting-cli
腾讯会议命令行工具（CLI），基于腾讯会议开放平台 OAuth2 授权，支持会议管理、录制管理、参会报告等功能。
Custom licenseSep 17, 2026 · metrics 2.10.0
crates.io
dcchut/async-recursion
Procedural macro for recursive async functions
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
electron/releases
📦 Complete and up-to-date info about every release of Electron
MITSep 20, 2026 · metrics 2.10.0
npm
karthikv/purview
A server-side component framework. What if your React components ran on the server-side?
MITSep 18, 2026 · metrics 2.10.0
Go
lightninglabs/chantools
A loose collection of tools all somehow related to lnd and Lightning Network channels.
MITSep 19, 2026 · metrics 2.10.0
Go
schollz/pake
PAKE library for generating a strong secret between parties over an insecure channel
MITSep 20, 2026 · metrics 2.10.0
—
stuxf/basic-typst-resume-template
A basic resume for typst, designed to work well with ATS systems.
UnlicenseSep 19, 2026 · metrics 2.10.0
npm
Karanjot786/TermUI
TermUI is a TypeScript/JavaScript framework for building terminal apps. Flexbox layout, JSX, hooks, global state, theming, animations, routing, and hot reload. No native dependencies.
MITSep 18, 2026 · metrics 2.10.0
—
OpenTouryoProject/OpenTouryo
”Open棟梁”は、長年の.NETアプリケーション開発実績にて蓄積したノウハウに基づき開発した.NET用アプリケーション フレームワークです。 (”OpenTouryo” , is an application framework for .NET which was developed using the accumulated know-how with a long track record in .NET application development.)
Custom licenseSep 17, 2026 · metrics 2.10.0
—
ansible-collections/community.windows
Windows community collection for Ansible
GPL-3.0Sep 19, 2026 · metrics 2.10.0
PyPI · Go · npm
facebookresearch/gcm
GPU Cluster Monitoring (GCM): Large-Scale AI Research Cluster Monitoring
MITSep 19, 2026 · metrics 2.10.0
npm
mlugg/setup-zig
Install a Zig compiler for usage in GitHub Actions workflows. Read-only mirror of https://codeberg.org/mlugg/setup-zig.
MITSep 19, 2026 · metrics 2.10.0
PyPI
munich-quantum-toolkit/qecc
MQT QECC - Tools for Quantum Error Correcting Codes
MITSep 18, 2026 · metrics 2.10.0
Packagist
PHPOffice/Common
Shared components between all PHPOffice projects
Custom licenseSep 17, 2026 · metrics 2.10.0
crates.io
Rahix/avr-device
Register access crate for AVR microcontrollers
Apache-2.0Sep 17, 2026 · metrics 2.10.0
npm
defenseunicorns/pepr
:unicorn: Type safe K8s middleware for humans
Apache-2.0Sep 18, 2026 · metrics 2.10.0
Go · crates.io
kubewarden/adm-controller
Manage admission policies in your Kubernetes cluster with ease
Apache-2.0Sep 19, 2026 · metrics 2.10.0
crates.io
llogiq/bytecount
Counting occurrences of a given byte or UTF-8 characters in a slice of memory – fast
Apache-2.0Sep 17, 2026 · metrics 2.10.0
Go
solworktech/md2pdf
A CLI utility that generates PDFs from Markdown. Features: syntax highlighting (for code blocks), dark, light and custom themes, TOC autogeneration, tables, pagination control (using horizontal lines - especially useful for presentations), page Footer (consisting of author, title and page number), support of non-Latin charsets and multiple fonts
MITSep 20, 2026 · metrics 2.10.0
crates.io
Gilnaa/memoffset
offsetof for Rust
MITSep 17, 2026 · metrics 2.10.0
npm
alexcaza/export-to-csv
Export a JS collection to CSV; written in TypeScript.
Custom licenseSep 18, 2026 · metrics 2.10.0
Go
praetorian-inc/julius
Simple LLM service identification - translate IP:Port to Ollama, vLLM, LiteLLM, or 60+ other AI services in seconds
Apache-2.0Sep 17, 2026 · metrics 2.10.0